- Dec 23, 2020
- 124
SomeRandomCat Security Configuration 2021
- Thread starter SomeRandomCat
- Start date
- Dec 23, 2020
- 124
Veracrypt is open-source so people can look over the code. One open-source code audit is more than Bitlocker has, which is none. It is a fork of TrueCrypt, which was also audited and the flaws were patched in the first VC releases, so that is technically two audts. I wasn't aware that Microsoft had a good reputation in the first place, since it's not open source, we cannot say that it does or doesn't have a backdoor.
- Jul 27, 2015
- 5,458
Nothing wrong really with VeraCrypt and extra so after the genuine audits it went through. Bitlocker is something I personal avoid. There is too many reports about it being abused and possible will be used as a backdoor vector. Unless it already is.
malwaretips.com
malwaretips.com
malwaretips.com
Just because a feature is built-in Windows, it does not automatic means that it's inheritance safe and secure. Otherwise there would never exist a need and market for 3rd party tools, for example to tweak Microsoft Defender etc.
But back more to the actual thread topic. My advise if you @SomeRandomCat want another tag, is to listen to member @harlan4096 . He is the one that decide.
China's APT hackers move to ransomware attacks
Security researchers investigating a set of ransomware incidents at multiple companies discovered malware indicating that the attacks may be the work of a hacker group believed to operate on behalf of China. Although the attacks lack the sophistication normally seen with advanced threat actors...
malwaretips.com
CHwapi hospital hit by Windows BitLocker encryption cyberattack
The CHwapi hospital in Belgium is suffering from a cyberattack where threat actors claim to have encrypted 40 servers and 100 TB of data using Windows Bitlocker. On Sunday, CHwapi suffered an attack that caused the hospital to redirect patients to other hospitals and delay surgical procedures...
malwaretips.com
New US Bill would require makers of encrypted devices to leave a backdoor
The Lawful Access to Encrypted Data Act could be a crushing blow to privacy in the US. The bill would require manufacturers to leave a backdoor that the government could access when needed. There’s plenty of opposition to the bill from security and privacy advocates US Senators have introduced...
malwaretips.com
But back more to the actual thread topic. My advise if you @SomeRandomCat want another tag, is to listen to member @harlan4096 . He is the one that decide.
- Apr 28, 2015
- 8,948
@SomeRandomCat and @HarborFront:
Tha's not true, only KSC Free has no Application Control/FireWall, paid versions of course have them...
Last edited:
- Dec 23, 2020
- 124
@upnorth , yeah, well, it is what it is. The WiseVector developer(s) have went out of their way to make sure it works along-side Kaspersky, and enabling UAC would do nothing other than double up on alerts. Kaspersky has much better detection than Microsoft at this point.
A lot of people put a lot of faith in Microsoft, and that is just fine, but I firmly believe there are much better 3rd party options out there.
A lot of people put a lot of faith in Microsoft, and that is just fine, but I firmly believe there are much better 3rd party options out there.
- Apr 7, 2016
- 568
As mentioned, a little overkill. You should only use one good real-time suite, and you got that covered with KTS, you should ditch Comodo IMO. You have got some good advice about the rest. Thanks for sharing. 
- Aug 4, 2016
- 1,465
I'm not a fan of UAC & never have been, we used almost identical idea but mechanical version some years ago in a UK extreme confined industry & it was found after a certain amount of time users pressed a one of two big red buttons as a matter of course - It had to be changed - So many people on whose PC I've fixed were infected just pressed 'yes' without any understanding as to what they were doing. It works if you understand implications of your actions & if you do you probably don't need it, IMHO overrated.
Last edited:
- Dec 23, 2014
- 8,592
UAC is a nightmare. Disabling it can save the user a lot of time = a few seconds a week.
SomeRandomCat,
With the current setup, the UAC is not required. But this setup is overkill and probably more dangerous for many people than potential malware. Anyway, you can use it at your own risk (nothing wrong with it). You can learn a lot while using it.
If you have a secure non-overkill setup, then UAC on max (Always notify) can prevent many popular UAC bypasses that rely on auto-elevate features. So, if you run your own trusted applications then simply ignore the UAC alert (do you have many such applications?). When you open a non-executable file (something that looks like a document, picture, movie, etc.) and can see the UAC alert then simply choose NO and think - why the hell a document needs Admin rights????.
Please tell us which (only one) security application you want to keep for sure, and you can get some advice on how to built a non-overkill setup.
SomeRandomCat,
With the current setup, the UAC is not required. But this setup is overkill and probably more dangerous for many people than potential malware. Anyway, you can use it at your own risk (nothing wrong with it). You can learn a lot while using it.
If you have a secure non-overkill setup, then UAC on max (Always notify) can prevent many popular UAC bypasses that rely on auto-elevate features. So, if you run your own trusted applications then simply ignore the UAC alert (do you have many such applications?). When you open a non-executable file (something that looks like a document, picture, movie, etc.) and can see the UAC alert then simply choose NO and think - why the hell a document needs Admin rights????.
Please tell us which (only one) security application you want to keep for sure, and you can get some advice on how to built a non-overkill setup.
He already said he needs the 3 apps for some reasons as stated on page 1UAC is a nightmare. Disabling it can save the user a lot of time = a few seconds a week.
SomeRandomCat,
With the current setup, the UAC is not required. But this setup is overkill and probably more dangerous for many people than potential malware. Anyway, you can use it at your own risk (nothing wrong with it). You can learn a lot while using it.
If you have a secure non-overkill setup, then UAC on max (Always notify) can prevent many popular UAC bypasses that rely on auto-elevate features. So, if you run your own trusted applications then simply ignore the UAC alert (do you have many such applications?). When you open a non-executable file (something that looks like a document, picture, movie, etc.) and can see the UAC alert then simply choose NO and think - why the hell a document needs Admin rights????.
Please tell us which (only one) security application you want to keep for sure, and you can get some advice on how to built a non-overkill setup.
Comodo for auto-containment/FW/HIPS
KTS for its AV only
SB Plus for the browser use
- Apr 24, 2016
- 7,415
- Dec 23, 2014
- 8,592
Maybe, but he clearly has to change his mind or no one can help him.
Why have you listed both Paid (KTS) and Free (KSC)?
- Dec 23, 2020
- 124
@Spawn , Because the modules I leave active in KTS Paid are available in KSC Free. So, if someone (like me) has a license to KTS, then they can use that with the modules I listed, or if not, then they can just roll with KSC free.
- Dec 23, 2020
- 124
The thing is, everything works perfectly together. I use Sandboxie for it's ability to designate the sandbox location to a RamDisk, and only for my browser (as I stated above). WV works perfectly along-side KTS/KSC as well. Maybe overkill, but stable and smooth.
- Apr 13, 2013
- 3,224
Hi Cat! I noticed that you had all of Comodo at "max settings". If this included the HIPS at the Paranoid level you may want reevaluate and drop it to Safe Mode for two main reasons: first, Paranoid Mode must be an annoyance, and more importantly malware utilizing WMI can be so constructed that will slice through aggressive HiPS and truly darken your day.
Other than that, nice setup!
Other than that, nice setup!
- Aug 27, 2020
- 446
Perhaps it has been mentioned but how about a Password Manager?, great Config thanks for sharing.
Read page 1 for his reasons in using SB Plus and Comodo
- Dec 23, 2020
- 124
Yeah, I guess I should of went into a bit more detail. I do use Safe Mode.
I have used them in the past, for now I virtualize* my browser in my RAM so it never writes to disk, and I type in all the passwords manually (only once per reboot, when the RAM wipes). This way there are never actually any passwords stored to disk cache. When the 'folderfication' software with encryption comes out I might play around with that and switch things up a bit, but for now typing them in doesn't bother me too much.Perhaps it has been mentioned but how about a Password Manager?, great Config thanks for sharing.
Last edited:
- Dec 23, 2020
- 124
I went back through my configuration write-up and listed more details for most of the software I use, which better explains how I have everything configured and might alleviate some of your compatibility concerns. My setup might take a bit of fine-tuning compared to some others, and might be considered 'overkill', but it is extremely secure and extremely easy to use once configured the way I outlined.
Users can achieve the same results with a bit of common sense, and less security software. But you use whatever you need to make Windows "feel secure".
Similar threads
